Efficient 2-designs from bases exist 
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We show that in a complex d-dimensional vector space, one can find 0{d) bases whose elements form a 
2-design. Such vector sets generalize the notion of a maximal collection of mutually unbiased bases (MUBs). 
MUBs have manifold applications in quantum information theory (e.g. in state tomography, cloning, or cryp- 
tography) - however it is suspected that maximal sets exist only in prime-power dimensions. Our construction 
offers an efficient alternative for general dimensions. The findings are based on a framework recently estab- 
lished in [A. Roy and A. Scott, J. Math. Phys. 48, 072110 (2007)], which reduces the construction of such bases 
to the combinatorial problem of finding certain highly nonlinear functions between abelian groups. 



I. INTRODUCTION 



O ' Two bases {|ei)}i=i,..._d and in a d-diniensional Hilbert space are called mMfMflWy Mn/7/flie(^ if 1^^ ~ \/d 

, for every j. It has been shown that there can exist no more than d + 1 such bases in C^, and, conversely, that this number can 
be attained whenever d is the power of a prime [2]. It is intuitive that MUBs are advantageous for quantum state tomography, as 
measurements in unbiased bases reveal "maximally complementary" information about the measured state. 

One can make rigorous the intuition that MUBs are "evenly spread out" in state space, by observing that the elements of a 

n n( F~i rn 

maximal collection of MUBs form a complex projective 2-design [3, 4, 5, 6, 7]. Roughly speaking, a set of vectors T) is called a 
t-design, if the average of every tth order polynomial / over the unit sphere in equals the average of / over V (see Definition 
^ [T] below). Several of the advantageous properties of MUBs follow directly from this feature: e.g. a simple formula for state 
^ : reconstruction in terms of measurement outcomes or their optimality in certain cloning protocols \ Y\. 

^ A considerable amount of research has gone into the problem of determining MUB{d), the number of MUBs in dimension 

d 0]. Little is known about MU Bid) when d is not a power of a prime - however, there is some evidence for the fact that 
MUB{d) < c? + 1 in these cases Isl l9l [Toll . While determining MUB{d) is certainly an important mathematical problem, it 
I may not be the most pertinent question to ask from the point of view of quantum state tomography, as only maximal sets of 
^ MUBs can be used for this purpose. So it is timely to look for a "second best" alternative to maximal sets of MUBs. 

Therefore, in UJ it was proposed that the problem be approached from a different direction. The authors examine the quantity 
, M{d), defined as the number of bases one needs in dimension d in order to form a 2-design. The number M{d) equals d + 1 
if and only if there is a complete set of MUBs in d dimensions. In general, M (d) > d + 1, but whenever AI (d) is reasonably 
small, such sets of bases can serve as a good substitute for MUBs yj. We call a 2-design of this kind efficient if it consists of 
O 0{d) bases. 

It was shown in (tS that M(d) < jid- 1)2. Here, we improve their results by constructing weighted complex projective 
2-designs from roughly 2{d + Vd) bases for odd d and 3{d + Vrf) bases in even dimensions. 



II. DEFINITIONS AND PREVIOUS RESULTS 



H , 

' Let / be a homogeneous polynomial of order t in 2c? variables. We can regard / as a function on by evaluating it on 
coordinates (with respect to an arbitrary fixed basis) and their complex conjugates: /(IV')) = /(V'l! ■ ■ ■ ,fpd',tpi, ■ ■ ■ , tpd)- The 
set of such polynomials is denoted by Hom(t, t). 

Definition 1 (Weighted 2-designs). Let T) be a set of normalized vectors in and w : D ^ [0, 1] a normalized weight function. 
The set T) together with the weights w is a weighted complex projective 2-design if for all f e Hom(2, 2) the relation 



J2 w{x)f{x) = / f{x)dx (1) 



holds. 

The integral on the right hand side of ([T]i is understood to be taken with respect to the Haar measure on CP"^^^. We will make 
use of a combinatorial construction for weighted 2-designs introduced in iQl]. To this end: 

Definition 2 (Differential 1-uniformity Let A,B be finite abelian groups. The function f : A ^ B is differentially 
1 -uniform (dlu) if the equation 

f{x + a)- f{x) = b (2) 
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has at most one solution in x for every (a. h) 7^ (0, 0). 

Differentially 1 -uniform functions are related to highly non-linear functions, which have been the subject of research in 
combinatorics and cryptography lfl2ll . 

Theorem 3 (2-designs from dlu functions fH]). If f : A ^ B is dlu, then there is a weighted complex projective 2-design 
formed from \B\ + 1 bases in dimension d — \A\. 

Hence the challenge is to construct dlu functions from general A to some B which is as small as possible. Our particular 
construction below makes use of dlu functions with cyclic domain A = l/dlj. 

For any positive integer d, denote by C{d) the smallest cardinality of an abelian group B such that there exists a dlu function 
f -.l/dlj ^ B. The following theorem summarizes the relevant results of UJ. 

Theorem 4 (Known bounds on C{d) 111]). With notation as above: 

1. If d is an odd prime power, then C{d) — d (which is optimal). 

2. For d — ~ \, where p is an arbitrary prime number and k is any positive integer, we have C{d) < d + 1. 

3. For general d, C{d) < |(d- l)^. 

ni. AN 0{d) BOUND FOR C(d) 

We aim to improve the bounds of Theorem|4] The essence of the result is that C{d) is linear in d: 
Theorems. C(d) =0{d). 

More precisely, let d be any integer > 2. Let denote the smallest integer > d — 1 such that there exists a dlu function 
Z/(7rfZ B whose codomain B is of minimal order \B\ — C{qd), among all such integers and dlu functions. 

For example, if d — 1 is an odd prime, then by Theorem|4]we can take — d — 1, B — Z/qZ and clearly then \B\ — q will 
be minimal. 

The key result of this paper is as follows. 

Theorem 6. Let d be any integer > 2 and define qd as above. 

1. Ifd is odd then C(d) < 2 C(gd); 

2. and if d is even, C(d) < 3C{qd). 

By taking qd to be the smallest prime greater than or equal to d, we get the following expUcit asymptotic bounds: 
Corollary 7. Let d be as above and let 9 — 0.525 [T^l . For d large enough, we have that 

1. ford odd, C(d) < 2(d + d^); 

2. and similarly for d even, C(d) < 3(d + d^). 

We prove these results by constructing explicit functions from Z/dZ into groups of the sizes shown. 

A. Differentials and group homomorphisms 

Let A, B be two arbitrary finite abelian groups, written additively. We shall assume that \B\ > \A\ > 2. Let Map(A, B) 
denote the set of all functions between A and B, which itself is a finite abelian group under pointwise addition. 
Given any a e A and f : A^ B, define the differential operator Da : Map (A, B) Map (A, B) by 

Da{f)ix) = f{a + x)-fix), 

for any x in A. In this terminology, Definition|2]may be rephrased thus: the function / is dlu if for all non-zero a d A, the vector 
[Da{f){x)) contains no repeated values (here we fix an ordering of the elements x £ A). This makes precise the somewhat 
loose notion that / is dlu if it is as "far from being a homomorphism as possible". Indeed, yet another equivalent formulation of 
the condition that a function / be dlu is that its second differentials Dai £'02/ be nowhere-vanishing for all ai, 02 G A \ {0}. 
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There is a symmetry relation among the vectors Da{f) of differentials which follows from the identity: 

Daif){x) = -D^a{f)ia + x), (3) 

for all a,x E A. As a practical matter therefore, to check if a function / is dlu, it suffices to check "the first half" of the vectors 
Da{f)- In addition, the following useful identity holds: 

■r-l 

^™(/)(a:) + (4) 

i=0 

for all r E 'E, X E A and for all nonzero a E A. If A is cyclic then each vector Daf is easily determined using Q from the one 
generating vector Dif. This obviously also holds within the cyclic subgroups of a general abehan group A. 



B. The construction 



We now present a new class of dlu functions which improves the bound in (3) of Theorem|4] Henceforth we assume A = 
Z/dZ. The aim is to find n as small as possible such that there exists a group B of order n and a dlu function f : A ^ B. 

So let d be any integer > 2. Let p be the least prime which is coprime to d. Let q be any integer > d — 1 such that there exists 
a finite abelian group G and a dlu function <j) : Z/qZ G. For example, by Theorem|4]we may take q to be any odd prime 
TT > c? — 1, or else q — n^~\-\ for tt any prime, fc > 1 (see 1 1] §4 for the actual functions </> in this case). 

We write <t)d for the 'restriction' of to Z/dZ, viz.: 

<j,d{x)^(t){x), 0<x<d-l, 

where it is understood that is defined modulo d and where we set (t)d{d — 1) = = 0(0) in the case q = d — 1. 

Then we are able to construct examples of dlu functions as follows. We are grateful to Aidan Roy for pointing out the neat 
form in which our original (less general) construction has been rephrased below. 

Propositions. Let d,p,q,G,(l)d be as above. Define f : Z/dZ^ Z/pZ x G by 

f{i)^ii,M^)), (5) 

for < i < d — 1. Then f is dlu. 

Proof. Case (i): q> d.Fixa E Z/dZ. Observe that for every x E Z/dZ with 0<a + .T<d-l: 

Da(f>d{x) = 0d(a + x)~ (j)d{x) = (p{a + x) - (p{x) = Da(j){x), 

(where we always write a and x as the smallest positive integers representing their respective congruence classes modulo dor q 
as the case may be). Since </> is dlu, we know therefore that the values Da4>d{x) are distinct in G as x runs from to — 1 — a. 
Hence the same must be true of the Daf{x) for such x because of the identity 

Daf{x) = {Da{x), DaMx))- 

Remark 9. Note that one must take some care with this function Da{x) when a + x > d: the shift function x t—^ a + x operates 
modulo d (not q) and so in fact the congruence class of a + x is a + x — dfor the purposes of evaluating these differentials. For 
0<x<d— 1 — a there is no ambiguity and Da (x) is just equal to a. 

So it remains to show that the values of Daf{x) for d— a<x<d— 1 are distinct from one another, and that they do not 
coincide with any of the values just described for 0<x<d— l~a. This latter point follows from the remark above, since p 
is coprime to d and so for a + x > d: 

Da{x) = a + x — d — x = a — d^a mod p. 

We have reduced the problem to the assertion that for d~a<x<d — 1, the Da(f>d{x) are distinct. But it follows from the 
definitions of (j) and (j)d that 

Da(t>d{x) = (pdia + x) ~ (l)d{x) = (f>{a + X + q - d) - 0(.t) = Da+q-d4'ix), 

which again by the choice of as a dlu function, cannot have repeated values inside G. 
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Case (ii): q = d — 1. The proof is almost identical to that for case (i), the only added compUcation being that one has to 
consider the value 

DaMd - 1 - a) - Md - 1) - Md - 1 - a) = (f>{0) - (l>{q - a) 

which arises when x = d— 1 — a{= q — a), and to show that it does not already exist in the set of Da(t>{x) for Q < x < q — a~\. 
But 

m-<t>{q-a) = Da(t>{q-a), 
which by the fact that (f) is dlu cannot lie in the set described. □ 

So for odd d, we can choose q to be prime and employ Theorem|4]to obtain an upper bound for C(c?) of twice the smallest 
prime > d — 1. By Chebyshev's theorem, there is always a prime between d and 2d, so C{d) < M. Making use of more 
elaborate bounds on the worst case gap between two consecutive primes 1 13], we obtain the result advertised in Corollary|7] 

However, for even d we are constrained to around 3d at best; and for dimensions where d is divisible by 3 x 2, it is often much 
worse. For example if d — 30030, then the best bound given by this construction is 30029 x 17 = 510510. So we now provide 
a tighter bound for even values of d. 

Proposition 10. Let d, q, G, cj), (j)d be as above, with d even. Let a 'flag' function 9 : Z/dZ —>■ Z/3Z be deflned by 9{x) — Ofor 
< X < d/2- 1 and e{x) = I for d/2 <x <d - 1. Then 

f : Z/dZ Z/3Z X G : f{i) = {e{i), Mi)) (6) 

is dlu. 

Proof. It is clear from the structure of the function / that we may rely almost completely upon the previous proof, bearing in 
mind Remark|9l By equation[3]we need only focus on a in the range 1 < a < d/2. Then all we need to observe is that in 'crossing 
the a + X — d threshold', the functions Daf switch their flag DaO{x) to —1 from (or from +1 for d/2 — a < x < d/2 — 1), 
hence ensuring that the sets 

Daf{x), Q<x<d-l-a 

and 

Daf{.y) = {--l,Da+,-d<l>{y)), d-a<y<d-\ 
remain disjoint. Note that a similar observation to the one in Proposition [8] takes care of the case q = d — \. □ 
This ends the proof of Theorem|6] and by extension of Theorem|5] 

IV. COMPUTER FINDINGS IN LOW DIMENSIONS 

The results presented above give solutions which are within a multiplicative constant of the theoretical optimum C{d) — d. 
Still, computer searches reveal that better dlu functions are very likely to exist in general - at least whenever d is neither an 
odd prime power nor of the form p*^ — 1 for prime p. The first three numbers which are not of this form are d — 14, 20 and 
21. The table below compares recent computer findings of Andrew Scott (private communication) in these dimensions, with the 
systematic methods of the present note. 



d 


14 20 21 


Systematic: C(d) < 
Computer: C{d) < 


39 57 46 
20 32 37 



Scott has further shown by exhaustive search methods that no dlu function exists from Z/14Z into any abelian group of order 
less than 20. 
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